workspace-commands
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of a local utility script
src/hack.tsvia thebunruntime. Executing scripts within the workspace is a standard development task, but the logic withinhack.tsis not defined in the skill files. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to run workspace-level commands which could ingest untrusted content from the codebase.
- Ingestion points: Standard output and error streams from
pnpmandbuncommands are read by the agent. - Boundary markers: Absent. The agent is not instructed to ignore potential instructions embedded in the command output.
- Capability inventory: Subprocess execution for
pnpmandbuncommands as defined in the Quick Reference section of SKILL.md. - Sanitization: Absent. Data from command execution is passed to the agent without filtering or escaping.
Audit Metadata